agentic-qe 3.2.3 → 3.3.1

package/v3/dist/mcp/security/cve-prevention.d.ts

@@ -2,6 +2,10 @@
  * Agentic QE v3 - MCP Security: CVE Prevention Utilities
  * Security utilities for preventing common vulnerabilities (ADR-012)
  *
+ * This file serves as a facade that maintains backward compatibility
+ * while the actual implementations are organized using the Strategy Pattern
+ * in the validators/ directory.
+ *
  * Features:
  * - Path traversal protection (no ../ in paths)
  * - ReDoS prevention with regex escaping
@@ -9,143 +13,36 @@
  * - Input sanitization utilities
  * - Command injection prevention
  */
+export type { PathValidationResult, RegexSafetyResult, CommandValidationResult, SanitizationOptions, PathValidationOptions, } from './validators/interfaces';
+export type { RiskLevel } from './validators/interfaces';
+export { validatePath, normalizePath, joinPaths, joinPathsAbsolute, getExtension, PathTraversalValidator, PATH_TRAVERSAL_PATTERNS, DANGEROUS_PATH_COMPONENTS, } from './validators/path-traversal-validator';
+export { isRegexSafe, escapeRegex, createSafeRegex, RegexSafetyValidator, REDOS_PATTERNS, countQuantifierNesting, hasExponentialBacktracking, } from './validators/regex-safety-validator';
+export { timingSafeCompare, timingSafeHashCompare, generateSecureToken, secureHash, CryptoValidator, } from './validators/crypto-validator';
+export { sanitizeInput, escapeHtml, stripHtmlTags, InputSanitizer, HTML_ESCAPE_MAP, SQL_INJECTION_PATTERNS, SHELL_METACHARACTERS, DANGEROUS_CONTROL_CHARS, } from './validators/input-sanitizer';
+export { validateCommand, escapeShellArg, CommandValidator, DEFAULT_ALLOWED_COMMANDS, BLOCKED_COMMAND_PATTERNS, } from './validators/command-validator';
+export { ValidationOrchestrator, getOrchestrator, createOrchestrator, } from './validators/validation-orchestrator';
 /**
- * Path validation result
- */
-export interface PathValidationResult {
-    valid: boolean;
-    normalizedPath?: string;
-    error?: string;
-    riskLevel: 'none' | 'low' | 'medium' | 'high' | 'critical';
-}
-/**
- * Regex safety result
- */
-export interface RegexSafetyResult {
-    safe: boolean;
-    pattern?: string;
-    escapedPattern?: string;
-    error?: string;
-    riskyPatterns: string[];
-}
-/**
- * Command validation result
- */
-export interface CommandValidationResult {
-    valid: boolean;
-    sanitizedCommand?: string;
-    error?: string;
-    blockedPatterns: string[];
-}
-/**
- * Input sanitization options
- */
-export interface SanitizationOptions {
-    maxLength?: number;
-    allowedChars?: RegExp;
-    stripHtml?: boolean;
-    stripSql?: boolean;
-    escapeShell?: boolean;
-    trim?: boolean;
-}
-/**
- * Path validation options
- */
-export interface PathValidationOptions {
-    basePath?: string;
-    allowAbsolute?: boolean;
-    allowedExtensions?: string[];
-    deniedExtensions?: string[];
-    maxDepth?: number;
-    maxLength?: number;
-}
-/**
- * Validate and sanitize a file path to prevent traversal attacks
- */
-export declare function validatePath(path: string, options?: PathValidationOptions): PathValidationResult;
-/**
- * Normalize a path by resolving . and .. components
- */
-export declare function normalizePath(path: string): string;
-/**
- * Safely join path components (strips leading/trailing slashes from all parts)
- */
-export declare function joinPaths(...paths: string[]): string;
-/**
- * Join paths preserving absolute path from first component
- */
-export declare function joinPathsAbsolute(...paths: string[]): string;
-/**
- * Get file extension
- */
-export declare function getExtension(path: string): string | null;
-/**
- * Check if a regex pattern is safe from ReDoS
- */
-export declare function isRegexSafe(pattern: string): RegexSafetyResult;
-/**
- * Escape special regex characters in a string
- */
-export declare function escapeRegex(str: string): string;
-/**
- * Create a safe regex with timeout
- */
-export declare function createSafeRegex(pattern: string, flags?: string, maxLength?: number): RegExp | null;
-/**
- * Perform a timing-safe string comparison
- */
-export declare function timingSafeCompare(a: string, b: string): boolean;
-/**
- * Timing-safe comparison for hashed values
- */
-export declare function timingSafeHashCompare(value: string, expectedHash: string): boolean;
-/**
- * Generate a secure random token
- */
-export declare function generateSecureToken(length?: number): string;
-/**
- * Hash a value securely
- */
-export declare function secureHash(value: string, salt?: string): string;
-/**
- * Sanitize input string
- */
-export declare function sanitizeInput(input: string, options?: SanitizationOptions): string;
-/**
- * Escape HTML special characters
- */
-export declare function escapeHtml(str: string): string;
-/**
- * Strip HTML tags from a string
- * Handles both complete tags and incomplete/malformed tags to prevent XSS
- */
-export declare function stripHtmlTags(str: string): string;
-/**
- * Validate and sanitize a command
- */
-export declare function validateCommand(command: string, allowedCommands?: string[]): CommandValidationResult;
-/**
- * Escape a string for safe shell usage
+ * CVEPrevention - Main security utilities object
+ * Provides backward-compatible access to all security functions
  */
-export declare function escapeShellArg(arg: string): string;
 export declare const CVEPrevention: {
-    validatePath: typeof validatePath;
-    normalizePath: typeof normalizePath;
-    joinPaths: typeof joinPaths;
-    joinPathsAbsolute: typeof joinPathsAbsolute;
-    getExtension: typeof getExtension;
-    isRegexSafe: typeof isRegexSafe;
-    escapeRegex: typeof escapeRegex;
-    createSafeRegex: typeof createSafeRegex;
-    timingSafeCompare: typeof timingSafeCompare;
-    timingSafeHashCompare: typeof timingSafeHashCompare;
-    generateSecureToken: typeof generateSecureToken;
-    secureHash: typeof secureHash;
-    sanitizeInput: typeof sanitizeInput;
-    escapeHtml: typeof escapeHtml;
-    stripHtmlTags: typeof stripHtmlTags;
-    validateCommand: typeof validateCommand;
-    escapeShellArg: typeof escapeShellArg;
+    validatePath: (path: string, options?: import("./cve-prevention").PathValidationOptions) => import("./cve-prevention").PathValidationResult;
+    normalizePath: (path: string) => string;
+    joinPaths: (...paths: string[]) => string;
+    joinPathsAbsolute: (...paths: string[]) => string;
+    getExtension: (path: string) => string | null;
+    isRegexSafe: (pattern: string) => import("./cve-prevention").RegexSafetyResult;
+    escapeRegex: (str: string) => string;
+    createSafeRegex: (pattern: string, flags?: string, maxLength?: number) => RegExp | null;
+    timingSafeCompare: (a: string, b: string) => boolean;
+    timingSafeHashCompare: (value: string, expectedHash: string) => boolean;
+    generateSecureToken: (length?: number) => string;
+    secureHash: (value: string, salt?: string) => string;
+    sanitizeInput: (input: string, options?: import("./cve-prevention").SanitizationOptions) => string;
+    escapeHtml: (str: string) => string;
+    stripHtmlTags: (str: string) => string;
+    validateCommand: (command: string, allowedCommands?: string[]) => import("./cve-prevention").CommandValidationResult;
+    escapeShellArg: (arg: string) => string;
 };
 export default CVEPrevention;
 //# sourceMappingURL=cve-prevention.d.ts.map

package/v3/dist/mcp/security/cve-prevention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cve-prevention.d.ts","sourceRoot":"","sources":["../../../src/mcp/security/cve-prevention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuCD;;GAEG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CAiItB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA0BlD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAOpD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAoB5D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxD;AA6BD;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CA4B9D;AAiED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,EACd,SAAS,SAAQ,GAChB,MAAM,GAAG,IAAI,CAgBf;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAW/D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAGlF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,SAAK,GAAG,MAAM,CAMvD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAG/D;AAyCD;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,MAAM,CA8CtF;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiCjD;AA6BD;;GAEG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,eAAe,GAAE,MAAM,EAA6B,GACnD,uBAAuB,CA2CzB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGlD;AAMD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;CA2BzB,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"cve-prevention.d.ts","sourceRoot":"","sources":["../../../src/mcp/security/cve-prevention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,YAAY,EAEV,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EAGvB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAOzD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAG/C,OAAO,EACL,WAAW,EACX,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,aAAa,EACb,UAAU,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACL,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,kBAAkB,GACnB,MAAM,sCAAsC,CAAC;AA4B9C;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;CA2BzB,CAAC;AAEF,eAAe,aAAa,CAAC"}